Educause Security Discussion mailing list archives
Re: Telehealth with Zoom or Teams
From: "Pardonek, Jim" <jpardonek () LUC EDU>
Date: Mon, 23 Mar 2020 14:46:01 +0000
We initially did not require a separate license for Zoom because we did not provide telehealth. Now that we are all in our homes, we are taking advantage of the relaxed requirements and allowing our wellness center to use Zoom. They are well aware of the security provisions and are not, for example, recording any sessions. We will re-evaluate once things return to normal. Jim James Pardonek, MS, CISSP, CEH, GSNA Associate Director Chief Information Security Officer Loyola University Chicago 1032 W. Sheridan Road | Chicago, IL 60660 •: (773) 508-6086 Loyola University Chicago will never ask you for your username or password. For the latest information security news at Loyola, please follow us online, Twitter: @LUCUISO Facebook: https://www.facebook.com/lucuiso/ Our Blog http://blogs.luc.edu/uiso/ From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU> On Behalf Of Ted Wilder Sent: Monday, March 23, 2020 9:41 AM To: SECURITY () LISTSERV EDUCAUSE EDU Subject: Re: [SECURITY] Telehealth with Zoom or Teams An important recent change to HIPAA enforcement to be aware of: https://www.hhs.gov/hipaa/for-professionals/special-topics/emergency-preparedness/notification-enforcement-discretion-telehealth/index.html From the HHS post: "OCR will exercise its enforcement discretion and will not impose penalties for noncompliance with the regulatory requirements under the HIPAA Rules against covered health care providers in connection with the good faith provision of telehealth during the COVID-19 nationwide public health emergency. This notification is effective immediately." Before this new guidance, Macalester established a HIPAA-complaint Zoom sub account in our education/enterprise account. Ted Wilder He/Him/His Associate Director Information Technology Services (651) 696-6623<tel:(651)+696-6623> | twilder () macalester edu<mailto:twilder () macalester edu> 1600 Grand Avenue Saint Paul, MN 55105 USA [https://lh4.googleusercontent.com/obELs00iWj6jy-wH62oQF6jiSFGFHVK213J_zBRbavAWG10TmnTbM7oGaqA6bLNEjN1N_KB1t7kNUgWUBAepMliAEcJAA45PceJCsPsw0_LVsuL6rh8ZNqokqLg5rNeE3DGpXahX]<https://www.macalester.edu/> On Mon, Mar 23, 2020 at 7:57 AM Kimmitt, Jonathan <jonathan-kimmitt () utulsa edu<mailto:jonathan-kimmitt () utulsa edu>> wrote: Hi all, Does anybody have any checklists that you use or give to your users to ensure HIPAA compliance on Teams or Zoom? Specifically, things like where to store recordings, specific settings for remote computers, etc…. We have some clinics on campus that are jumping into Telehealth, and I’m needing a quick start into things to think about for them… Thanks all! I hope everyone is at home, healthy and safe! -Jonathan ~ Jonathan Kimmitt CISSP, PCIP, CEH, CIPM, GPEN, CIPT, CIPP/E, GSNA Chief Information Security Officer Information Technology The University of Tulsa 918.631.2743 jonathan-kimmitt () utulsa edu<mailto:jonathan-kimmitt () utulsa edu> ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community
Current thread:
- Telehealth with Zoom or Teams Kimmitt, Jonathan (Mar 23)
- Re: Telehealth with Zoom or Teams Ted Wilder (Mar 23)
- Re: Telehealth with Zoom or Teams Pardonek, Jim (Mar 23)
- Re: Telehealth with Zoom or Teams Kimmitt, Jonathan (Mar 23)
- Re: Telehealth with Zoom or Teams Scott Norton (Mar 23)
- Re: [External] Re: [SECURITY] Telehealth with Zoom or Teams Thomas Dugas (Mar 23)
- Re: [External] Re: [SECURITY] Telehealth with Zoom or Teams Scantlin, Aaron J. (Mar 23)
- Re: Telehealth with Zoom or Teams Pardonek, Jim (Mar 23)
- Re: Telehealth with Zoom or Teams Ted Wilder (Mar 23)
- <Possible follow-ups>
- Re: Telehealth with Zoom or Teams Menne, Michael S (Mar 23)
- Re: [External] Re: [SECURITY] Telehealth with Zoom or Teams Gregg, Christopher S. (Mar 23)